“Decoding Political Violence with OSINT and Lessons from the Frontline”

Join deep dive: Wed, Dec 18, 16:00 CET

urlscan.io

By Maltego Technologies
Get information and analyze content of an URL.
# Fraud & Abuse # Incident Response
urlscan.io Integration for Maltego

urlscan.io Transforms for Maltego

urlscan.io is a free service to scan and analyze websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates. This includes the domains and IPs contacted, the resources (JavaScript, CSS, etc) requested from those domains, as well as additional information about the page itself.

urlscan.io will take a screenshot of the page, record the DOM content, JavaScript global variables, server IPs, cookies created by the page, and many more details. If the site is targeting the users one of the more than 400 brands tracked by urlscan.io, it will be highlighted as potentially malicious in the scan results.

With urlscan.io Transforms, get information about an URL and all the details associated with the URL such as site content, relations with other sites, etc.

Typical Users of urlscan.io Data

  • Threat Hunting
  • Incident Response
  • Threat Intelligence
  • Fraud & Abuse

Integration Benefits

Quickly identify Malicious and Phishing URLs

Triage a specific website to see its content (e.g. screenshot, text content) without connecting to it so that you can see any redirection or suspicious visual indication such as phishing banners or contents.

Enrich Existing Threat Intelligence

Enrich your Entities with additional information from urls to check if there are websites that are matching specific IoCs (IP, filename, hash, and more) or to find websites that are hosted on the same IP or similar to others, so that you can have additional context information of the scope of an abuse and additional information to investigate attribution and/or profiling.

Gain Comprehensive Insights

Drill-down to extract indicators from a suspicious malicious website identified by a tool or reported by a user/requestor. Those indicators can be pivoted or investigated with other sources of data such as VirusTotal.

Leverage urlscan.io Data for

Malicious Page Detection

Urlscan.io makes it easier for investigators to check if a given URL is safe to browse or if its malicious, without actually logging in to the webage as well as provides all the details associated with the URL.
Read more

Resources

Articles

Hunting Phishing Sites in the Festive Season with Maltego

Contact

Reach out to us to learn more about this data integration and how to access it.
By clicking on "Send Message", you agree to the processing of the data you entered and you allow us to contact you for the purpose selected in the form. For further information, see our Data Privacy Policy.

About urlscan.io

urlscan.io is a free service to scan and analyse websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates. This includes the domains and IPs contacted, the resources (JavaScript, CSS, etc) requested from those domains, as well as additional information about the page itself.

To learn more, visit https://urlscan.io/.